<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>VulnFeed.org: Ivanti Connect Secure</title><link>https://vulnfeed.org/</link><description>Every disclosure, as it lands. Critical-only feed available.</description><language>en</language><atom:link href="https://vulnfeed.org/feed/product/ivanti-connect-secure.xml" rel="self" type="application/rss+xml"/><item><title>CVE-2026-118527: Ivanti Connect Secure Generation of Predictable Numbers or Identifiers Vulnerability</title><link>https://vulnfeed.org/cve/CVE-2026-118527/</link><guid isPermaLink="true">https://vulnfeed.org/cve/CVE-2026-118527/</guid><pubDate>Tue, 03 Nov 2026 14:53:28 +0000</pubDate><description>Ivanti Connect Secure contains a generation of predictable numbers or identifiers vulnerability that allows a remote authenticated attacker to upload files with attacker-controlled content to a known location on disk. This vulnerability can be chained with CVE-2026-104935 and CVE-2026-111357.</description></item><item><title>CVE-2026-111357: Ivanti Connect Secure Missing Authentication for Critical Function Vulnerability</title><link>https://vulnfeed.org/cve/CVE-2026-111357/</link><guid isPermaLink="true">https://vulnfeed.org/cve/CVE-2026-111357/</guid><pubDate>Fri, 30 Oct 2026 00:00:00 +0000</pubDate><description>Ivanti Connect Secure contains a missing authentication for critical function vulnerability that could allow a local authenticated attacker to escalate their privileges. This vulnerability can be chained with CVE-2026-104935 and CVE-2026-118527.</description></item><item><title>CVE-2026-104935: Ivanti Connect Secure Authentication Bypass by Spoofing Vulnerability</title><link>https://vulnfeed.org/cve/CVE-2026-104935/</link><guid isPermaLink="true">https://vulnfeed.org/cve/CVE-2026-104935/</guid><pubDate>Tue, 13 Oct 2026 15:31:07 +0000</pubDate><description>Ivanti Connect Secure contains an authentication bypass by spoofing vulnerability that allows a remote unauthenticated attacker to execute arbitrary commands.</description></item></channel></rss>
